Cuckoo Sandbox

Category	Started On	Completed On	Duration	Cuckoo Version
FILE	2018-03-13 21:18:56	2018-03-13 21:21:46	170 seconds	1.2

File Details

File name

com.fdhgkjhrtjkjbx.model.apk

File size

2514506 bytes

File type

Zip archive data, at least v2.0 to extract

CRC32

EAE218C3

MD5

3d7e04e37db833f47d08975e27c69a9c

SHA1

91a302f1a2cac8951123431f75ff8d705950fb17

SHA256

9a0dfff4d05e739d53da02e9275b67dcff6ca1fdd82d65cb2c06b96b90fa3c06

SHA512

298c265c429443c10de03a3ddafeb600185c4b21d261ece58ab3d737fdb7b6f3f66710d9d3e4ffd1b64218e3e5d8ba0b0b44b0e58c45e435e9234ec7e8a3cdc2

Ssdeep

49152:Y6Y+jqPA+ZFuqmNpZPfaMXz/tbZ/CaJe0iEKLgqWAExMlCkeAAw:Y67jqXuqm9Pi6T/CUF6E/AEMCPI

PEiD

None matched

Yara

None matched

VirusTotal

Permalink
VirusTotal Scan Date: 2018-03-13 01:50:05
Detection Rate: 35/62 (Expand)

Antivirus	Version	Result
Ad-Aware	3.0.3.1010	Clean
AegisLab	4.2	Troj.Gen!c
AhnLab-V3	3.12.0.20130	Android-PUP/Dowgin.23014
Alibaba	1.0	A.L.Rog.DdzmPjApp
ALYac	1.1.1.5	Clean
Antiy-AVL	3.0.0.1	GrayWare[AdWare]/Android.Mmaro
Arcabit	1.0.0.830	Android.Adware.Agent.CJ
Avast	18.2.3827.0	Clean
Avast-Mobile	180312-02	APK:RepMetagen [Trj]
AVG	18.2.3827.0	Clean
Avira	8.3.3.6	Clean
AVware	1.5.0.42	Trojan.AndroidOS.Generic.A
Baidu	1.0.0.2	Android.Trojan-Dropper.Agent.il
BitDefender	7.2	Android.Adware.Agent.CJ
Bkav	1.3.0.9466	Clean
CAT-QuickHeal	14.00	Android.Secapk.A (PUP)
ClamAV	0.99.2.0	Andr.Malware.Agent-1493449
CMC	1.1.0.977	Clean
Comodo	28668	Clean
Cyren	5.4.30.7	AndroidOS/GenPua.3D7E04E3!Olympus
DrWeb	7.0.28.2020	Android.Packed.9465
Emsisoft	4.0.2.899	Android.Adware.Agent.CJ (B)
ESET-NOD32	17045	a variant of Android/Secapk.E potentially unsafe
F-Prot	4.7.1.166	AndroidOS/Secapk.A
F-Secure	11.0.19100.45	Riskware:Android/SecApk
Fortinet	5.4.247.0	Adware/Secapk!Android
GData	A:25.16336B:25.11775	Android.Adware.Agent.CJ
Jiangmin	16.0.100	Clean
K7AntiVirus	10.41.26473	Clean
K7GW	10.41.26473	Trojan ( 004b57611 )
Kaspersky	15.0.1.13	not-a-virus:HEUR:AdWare.AndroidOS.Mmaro.a
Kingsoft	2013.8.14.323	Clean
Malwarebytes	2.1.1.1115	Clean
MAX	2017.11.15.1	malware (ai score=100)
McAfee	6.0.6.653	Artemis!3D7E04E37DB8
McAfee-GW-Edition	v2015	Artemis
Microsoft	1.1.14600.4	Clean
MicroWorld-eScan	14.0.297.0	Clean
NANO-Antivirus	1.0.100.21498	Trojan.Android.Dowgin.dtznya
nProtect	2018-03-13.01	Clean
Panda	4.6.4.2	Clean
Qihoo-360	1.0.0.1120	Adware.Android.Gen
Rising	25.0.0.1	Worm.Tsunami!1.A9BB (CLASSIC)
Sophos	4.98.0	Andr/PornClk-AB
SUPERAntiSpyware	5.6.0.1032	Clean
Symantec	1.5.0.0	Trojan.Gen.2
SymantecMobileInsight	1.0.0.35_220	Trojan:Malapp
Tencent	1.0.0.1	a.gray.loadding
TheHacker	6.8.0.5.2523	Clean
TotalDefense	37.1.62.1	Clean
TrendMicro	9.862.0.1074	Clean
TrendMicro-HouseCall	9.950.0.1006	Suspicious_GEN.F47V0128
Trustlook	2	Android.Malware.General
VBA32	3.12.28.0	Clean
VIPRE	65218	Clean
ViRobot	2014.3.20.0	Clean
Webroot	1.0.0.400	Clean
WhiteArmor	None	Malware.HighConfidence
Yandex	5.5.1.3	Clean
Zillya	2.0.0.3509	Clean
ZoneAlarm	1.0	not-a-virus:HEUR:AdWare.AndroidOS.Mmaro.a
Zoner	1.0	Clean

Android Application Info

Package	com.fdhgkjhrtjkjbx.model
Main Activity	com.fdhgkjhrtjkjbx.model.LoadActivity

Activities

Activity Name
com.fdhgkjhrtjkjbx.model.LoadActivity
com.fdhgkjhrtjkjbx.model.BgActivity
com.fdhgkjhrtjkjbx.model.MainActivity
com.fdhgkjhrtjkjbx.model.NewActivity
com.fdhgkjhrtjkjbx.model.ReadActivity
com.fdhgkjhrtjkjbx.model.DingActivity
com.fdhgkjhrtjkjbx.model.SearchActivity
com.fdhgkjhrtjkjbx.model.ShowSearchActivity
com.fdhgkjhrtjkjbx.model.SitemActivity
com.fdhgkjhrtjkjbx.model.MoreActivity
com.fdhgkjhrtjkjbx.model.ShowHtmlActivity
com.fdhgkjhrtjkjbx.model.ShowActivity
com.fdhgkjhrtjkjbx.model.AppStoreActivity
com.fdhgkjhrtjkjbx.model.AppDetailActivity
com.fdhgkjhrtjkjbx.model.MakeMoneyActivity
com.fdhgkjhrtjkjbx.model.ExchangeActivity
com.jfdlplapk.BiwlzuGoogleActivity
com.yangccaa.chengaa.WEYY
com.yangccaa.ssll.SDGG

Services

Service Name
com.fdhgkjhrtjkjbx.model.MainService
com.fdhgkjhrtjkjbx.model.FloatService
com.fdhgkjhrtjkjbx.model.CloseAdvService
com.jfdlplapk.BiwlzuGoogleService
com.yangccaa.chengaa.WEUU
com.yangccaa.ssll.SDKK

Receivers

Receiver Action
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

Permissions

Signatures

Application Dropped Dex File (Dynamic)

Application Dropped Files (Dynamic)

Application Fingerprint (Dynamic)

File has been identified by at least one AntiVirus on VirusTotal as malicious (Osint)

Application Contains Jar File (Static)

Application Contains Shared Object Files (Static)

Application Queried Installed Apps (Dynamic)

Application Registered Receiver In Runtime (Dynamic)

Performs some HTTP requests

Umeng Adware (Detection)

Application Asks For Dangerous Permissions (Static)

Application Uses Bangcle Packer (Static)

Application Contains ARM Binaries (Static)

File has been identified by more the 10 AntiVirus on VirusTotal as malicious (Osint)

Hidden Payload Found (Static)

Application Contains APK (Static)

Application Uses Reflection (Dynamic)

Android Dynamic Analysis

Shell Commands

Queried Accounts

Dynamically Loaded Files

SMS Messages

Registered Broadcast Receivers

Crypto Keys

Encryption Plaintext

Content Resolver Queries

Intents

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.MainActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.MainActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Reflection Calls

Fingerprints

Content Observers

Shared Preferences

Key	Value
session_id	151F30E1594747C7E2DE41DE1E799E57
start_millis	1520990390944
end_millis	-1
activities	["com.fdhgkjhrtjkjbx.model.LoadActivity",1]
duration	1412
terminate_time	1520990392356
start_millis	-1
end_millis	1520990392356
req_time	1236
app_id	4ae87cae7b159d89f3bc39ccf797beae
default	default
start_millis	1520990394327
end_millis	-1
isFirstRun	false
USER_CODE	29641753
activities	["com.fdhgkjhrtjkjbx.model.LoadActivity",1];["com.fdhgkjhrtjkjbx.model.BgActivity",11]
duration	12538
terminate_time	1520990405453
start_millis	-1
end_millis	1520990405453
start_millis	1520990407050
end_millis	-1
duration	0
activities
session_id	684720E539B1D25F042A54519C0255FA
start_millis	1520990407167
end_millis	-1
req_time	1140
activities	["com.fdhgkjhrtjkjbx.model.MainActivity",4]
duration	4657
terminate_time	1520990411824
start_millis	-1
end_millis	1520990411824
start_millis	1520990431084
end_millis	-1
activities	["com.fdhgkjhrtjkjbx.model.MainActivity",4];["com.fdhgkjhrtjkjbx.model.LoadActivity",1]
duration	5867
terminate_time	1520990432294
start_millis	-1
end_millis	1520990432294
app_id	4ae87cae7b159d89f3bc39ccf797beae
default	default
myac	com.yangccaa.chengaa.WEYY
myar	com.yangccaa.chengaa.WEPP
myas	com.yangccaa.chengaa.WEUU
jwd	latitude=&longitude=&
adType	2
pushFlag	true
appid	e8a6b3483f4cf1f896796d5657e94068
channelid	dapp
startTime	1520990439764
nextime	1520990440764
interval	7200000
rname	com.yangccaa.ssll.SDHH
aname	com.yangccaa.ssll.SDGG
sname	com.yangccaa.ssll.SDKK
appid	e8a6b3483f4cf1f896796d5657e94068
jwd	latitude=&longitude=&
myac	com.yangccaa.chengaa.WEYY
psflag	false
myar	com.yangccaa.chengaa.WEPP
init_time	1520990451985
filter_pkgs	com.qihoo360.mobilesafe,com.qihoo360.mobilesafe_mtk6573
myas	com.yangccaa.chengaa.WEUU
swflag	1
psflag	false
init_time	1520990455364
curad	{"total":4,"count":0,"list":[{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180207/201802071450888.apk","clickflag":1,"adappid":6778,"monitorurl":"","type":"2","downflag":1,"title":"西瓜视频最新版~","time":1440,"token":"3N7BuBsLKCkCvreFVxLLPNRfhrPnQsdnPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA96EEdUc5rEd","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20180129/201801291415884.png","adcodeid":8728,"title2":"西瓜视频","adtype":1,"pkg":"com.ss.android.article.video","tip1":"西瓜视频最新版~","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20180129/201801291415884.png","tip2":"西瓜视频最新版~","content":"西瓜视频","filesize":"10.14MB","positionflag":1,"brief":"西瓜视频","versioname":"2.4.1"},{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180115/201801151317390.apk","clickflag":1,"adappid":6086,"monitorurl":"","type":"2","downflag":1,"title":"天天快报-神乐","time":1440,"token":"3N7BuBsLKCmM5yx9Szya0_MnJKlPt5ljPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA96EEdUc5rEd","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20170615/201706151513672.png","adcodeid":7730,"title2":"天天快报","adtype":1,"pkg":"com.tencent.reading","tip1":"天天快报-神乐","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20170615/201706151513672.png","tip2":"天天快报","content":"天天快报","filesize":"19.21MB","positionflag":1,"brief":"天天快报","versioname":"4.6.10"},{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180207/20180207172659.apk","clickflag":1,"adappid":6559,"monitorurl":"","type":"2","downflag":1,"title":"腾讯新闻2868-神乐","time":1440,"token":"3N7BuBsLKCnx0ccgNl8BFAssc6pa3CMwPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA96EEdUc5rEd","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251416184.png","adcodeid":8425,"title2":"腾讯新闻","adtype":1,"pkg":"com.tencent.news","tip1":"腾讯新闻2868-神乐","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251416184.png","tip2":"腾讯新闻","content":"腾讯新闻","filesize":"20.26MB","positionflag":1,"brief":"腾讯新闻","versioname":"5.5.40"},{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180302/201803021704180.apk","clickflag":1,"adappid":6573,"monitorurl":"","type":"2","downflag":1,"title":"腾讯wifi-神乐","time":1440,"token":"3N7BuBsLKCnB0OO0uJ6jpwV8jgixTNHQPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA96EEdUc5rEd","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20171030/201710301745597.png","adcodeid":8449,"title2":"腾讯wifi管家","adtype":1,"pkg":"com.tencent.wifimanager","tip1":"腾讯wifi-神乐","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20171030/201710301745597.png","tip2":"提供免费WiFi","content":"腾讯wifi","filesize":"11.43MB","positionflag":1,"brief":"腾讯wifi","versioname":"3.3.0"}]}
filter_pkgs	com.qihoo360.mobilesafe,com.qihoo360.mobilesafe_mtk6573
swflag	1
adType	2
pushFlag	true
appid	e8a6b3483f4cf1f896796d5657e94068
channelid	dapp
nextime	1520990461230
interval	7200000
rname	com.yangccaa.ssll.SDHH
aname	com.yangccaa.ssll.SDGG
sname	com.yangccaa.ssll.SDKK
appid	e8a6b3483f4cf1f896796d5657e94068
myac	com.yangccaa.chengaa.WEYY
myar	com.yangccaa.chengaa.WEPP
myas	com.yangccaa.chengaa.WEUU
psflag	false
init_time	1520990465442
filter_pkgs	com.qihoo360.mobilesafe,com.qihoo360.mobilesafe_mtk6573
swflag	1
adType	2
pushFlag	true
appid	e8a6b3483f4cf1f896796d5657e94068
channelid	dapp
nextime	1520990471365
interval	7200000
rname	com.yangccaa.ssll.SDHH
aname	com.yangccaa.ssll.SDGG
sname	com.yangccaa.ssll.SDKK
appid	e8a6b3483f4cf1f896796d5657e94068
duration	0
activities
session_id	78F53C1CDE9F9077D967E7BD1E68402B
start_millis	1520990471210
end_millis	-1
req_time	1134
fs_time	1520990475173
appid	cfca2422e73ed6be1c99bcb80dc18356
curad	{"total":4,"count":0,"list":[{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180207/20180207172659.apk","clickflag":1,"adappid":6559,"monitorurl":"","type":"2","downflag":1,"title":"腾讯新闻2868-神乐","time":1440,"token":"3N7BuBsLKCnx0ccgNl8BFAssc6pa3CMwPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA4mOu0b4U2mZ","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251416184.png","adcodeid":8425,"title2":"腾讯新闻","adtype":1,"pkg":"com.tencent.news","tip1":"腾讯新闻2868-神乐","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251416184.png","tip2":"腾讯新闻","content":"腾讯新闻","filesize":"20.26MB","positionflag":1,"brief":"腾讯新闻","versioname":"5.5.40"},{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180302/201803021704180.apk","clickflag":1,"adappid":6573,"monitorurl":"","type":"2","downflag":1,"title":"腾讯wifi-神乐","time":1440,"token":"3N7BuBsLKCnB0OO0uJ6jpwV8jgixTNHQPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA4mOu0b4U2mZ","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20171030/201710301745597.png","adcodeid":8449,"title2":"腾讯wifi管家","adtype":1,"pkg":"com.tencent.wifimanager","tip1":"腾讯wifi-神乐","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20171030/201710301745597.png","tip2":"提供免费WiFi","content":"腾讯wifi","filesize":"11.43MB","positionflag":1,"brief":"腾讯wifi","versioname":"3.3.0"},{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20180202/201802021119411.apk","clickflag":1,"adappid":5662,"monitorurl":"","type":"2","downflag":1,"title":"起点读书！","time":1440,"token":"3N7BuBsLKClPGl_QFZY1VenVrYy1qSmePtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA4mOu0b4U2mZ","userflag":1,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171027/201710271603336.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20171027/201710271602630.png","adcodeid":7120,"title2":"起点阅读","adtype":1,"pkg":"com.qidian.QDReader","tip1":"起点读书！","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20171027/201710271602630.png","tip2":"起点阅读","content":"起点阅读","filesize":"23.77MB","positionflag":1,"brief":"起点阅读","versioname":"6.9.8"},{"clickurl":"","fileurl":"http://d.ad.139199.com/ad/20171206/201712061620974.apk","clickflag":1,"adappid":6677,"monitorurl":"","type":"2","downflag":1,"title":"QQ浏览器-神乐","time":1440,"token":"3N7BuBsLKCmqtdprKoEK7aHYZ_w63NsYPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA4mOu0b4U2mZ","userflag":2,"imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171206/201712061633321.png","install":"0","logo":"http://apk.d.ad.yuanfenup.com/ad/20171206/201712061631584.png","adcodeid":8579,"title2":"QQ浏览器","adtype":1,"pkg":"com.tencent.mtt","tip1":"QQ浏览器-神乐","iconurl":"http://apk.d.ad.yuanfenup.com/ad/20171206/201712061631584.png","tip2":"QQ浏览器","content":"QQ浏览器","filesize":"27.40MB","positionflag":1,"brief":"QQ浏览器","versioname":"8.0.0.3720"}]}
psflag	false
init_time	1520990477003
filter_pkgs	com.qihoo360.mobilesafe,com.qihoo360.mobilesafe_mtk6573
swflag	1
interval	4
adType	2
pushFlag	true
appid	e8a6b3483f4cf1f896796d5657e94068
channelid	dapp
nextime	1521004881056
interval	14400000
list_apps	{"total":8,"list":[{"logo":"http://apk.d.ad.yuanfenup.com/ad/20180129/201801291415884.png","desc":"西瓜视频","adcodeid":8728,"title2":"西瓜视频","fileurl":"http://d.ad.139199.com/ad/20180207/201802071450888.apk","adtype":1,"pkg":"com.ss.android.article.video","adappid":6778,"tip1":"西瓜视频最新版~","tip2":"西瓜视频最新版~","type":"2","downflag":1,"product":"","time":1440,"title":"西瓜视频","filesize":"10.14MB","token":"3N7BuBsLKCkCvreFVxLLPNRfhrPnQsdnPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com/ad/20180129/201801291415213.jpg","http://apk.d.ad.yuanfenup.com/ad/20180129/201801291415300.jpg"],"dflag":1,"brief":"西瓜视频","versioname":"2.4.1","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251416184.png","desc":"腾讯新闻","adcodeid":8425,"title2":"腾讯新闻","fileurl":"http://d.ad.139199.com/ad/20180207/20180207172659.apk","adtype":1,"pkg":"com.tencent.news","adappid":6559,"tip1":"腾讯新闻2868-神乐","tip2":"腾讯新闻","type":"2","downflag":1,"product":"","time":1440,"title":"腾讯新闻","filesize":"20.26MB","token":"3N7BuBsLKCnx0ccgNl8BFAssc6pa3CMwPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com","http://apk.d.ad.yuanfenup.com"],"dflag":1,"brief":"腾讯新闻","versioname":"5.5.40","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20170919/201709191714903.png","desc":"天天快报","adcodeid":8317,"title2":"天天快报","fileurl":"http://d.ad.139199.com/ad/20180302/20180302171533.apk","adtype":1,"pkg":"com.tencent.reading","adappid":6486,"tip1":"天天快报-邻动","tip2":"天天快报","type":"2","downflag":1,"product":"","time":1440,"title":"天天快报","filesize":"20.13MB","token":"3N7BuBsLKClEu7pTm1AP2KFrSJ6l272UPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com","http://apk.d.ad.yuanfenup.com"],"dflag":1,"brief":"天天快报","versioname":"4.6.70","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20170919/201709191714435.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20171016/201710161638175.png","desc":"腾讯wifi管家","adcodeid":8413,"title2":"腾讯wifi管家","fileurl":"http://d.ad.139199.com/ad/20171226/201712261556349.apk","adtype":1,"pkg":"com.tencent.wifimanager","adappid":6550,"tip1":"腾讯wifi-邻动","tip2":"随时随地免费连WiFi","type":"2","downflag":1,"product":"","time":1440,"title":"腾讯wifi管家","filesize":"11.51MB","token":"3N7BuBsLKCnRK3dSy17Ooo9psKnS4meVPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com","http://apk.d.ad.yuanfenup.com"],"dflag":1,"brief":"腾讯wifi","versioname":"3.2.0","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171016/201710161711567.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20171027/201710271602630.png","desc":"起点阅读","adcodeid":7120,"title2":"起点阅读","fileurl":"http://d.ad.139199.com/ad/20180202/201802021119411.apk","adtype":1,"pkg":"com.qidian.QDReader","adappid":5662,"tip1":"起点读书！","tip2":"起点阅读","type":"2","downflag":1,"product":"","time":1440,"title":"起点阅读","filesize":"23.77MB","token":"3N7BuBsLKClPGl_QFZY1VenVrYy1qSmePtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com","http://apk.d.ad.yuanfenup.com"],"dflag":1,"brief":"起点阅读","versioname":"6.9.8","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171027/201710271603336.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20170828/201708281656825.png","desc":"QQ阅读","adcodeid":8187,"title2":"QQ阅读","fileurl":"http://d.ad.139199.com/ad/20180202/201802021136676.apk","adtype":1,"pkg":"com.qq.reader","adappid":6401,"tip1":"QQ阅读O1高通","tip2":"QQ阅读","type":"2","downflag":1,"product":"","time":1440,"title":"QQ阅读","filesize":"18.81MB","token":"3N7BuBsLKClb3vZqlQn0J7VlpD1RZ6LIPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com/ad/20170828/201708281656555.jpg","http://apk.d.ad.yuanfenup.com/ad/20170828/20170828165764.jpg"],"dflag":1,"brief":"QQ阅读","versioname":"6.5.9.888","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20170828/201708281716892.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20171206/201712061631584.png","desc":"QQ浏览器","adcodeid":8579,"title2":"QQ浏览器","fileurl":"http://d.ad.139199.com/ad/20171206/201712061620974.apk","adtype":1,"pkg":"com.tencent.mtt","adappid":6677,"tip1":"QQ浏览器-神乐","tip2":"QQ浏览器","type":"2","downflag":1,"product":"","time":1440,"title":"QQ浏览器","filesize":"27.40MB","token":"3N7BuBsLKCmqtdprKoEK7aHYZ_w63NsYPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com","http://apk.d.ad.yuanfenup.com"],"dflag":1,"brief":"QQ浏览器","versioname":"8.0.0.3720","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20171206/201712061633321.png"},{"logo":"http://apk.d.ad.yuanfenup.com/ad/20170817/201708171657802.png","desc":"360手机助手","adcodeid":8177,"title2":"360手机助手","fileurl":"http://d.ad.139199.com/ad/20180202/201802021559312.apk","adtype":1,"pkg":"com.qihoo.appstore","adappid":6396,"tip1":"360手机助手-大罗马","tip2":"360手机助手","type":"2","downflag":1,"product":"","time":1440,"title":"360手机助手","filesize":"9.55MB","token":"3N7BuBsLKCkqzsbI9k0l7C2dmFAosxKVPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JA_qEUttIfjiK","showimage":["http://apk.d.ad.yuanfenup.com/ad/20170817/201708171657941.jpg","http://apk.d.ad.yuanfenup.com/ad/20170817/201708171657614.jpg"],"dflag":1,"brief":"360手机助手","versioname":"7.1.77","imgurl":"http://apk.d.ad.yuanfenup.com/ad/20170926/201709261613104.png"}]}
interval	4
adType	2
pushFlag	true
appid	e8a6b3483f4cf1f896796d5657e94068
channelid	dapp
nextime	1521004890153
interval	14400000
interval	4
adType	2
pushFlag	true
appid	e8a6b3483f4cf1f896796d5657e94068
channelid	dapp
nextime	1521004894053
interval	14400000

Content Values

Telephone State Listen

Files Accessed By Application

/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_tj_line
/sys/class/net/sit0/ifindex
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_arrow_down
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/list_share.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_bottom_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/d_appsc_an
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/pp_share.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/arrow_down.png
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_default_bg
/data/data/com.fdhgkjhrtjkjbx.model/files/mobclick_agent_cached_com.fdhgkjhrtjkjbx.model
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/code.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_btn_install
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_bottom_btn_cancel
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_safe_line
/data/data/com.fdhgkjhrtjkjbx.model/.cache/classes.jar
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_bottom_btn_install
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_bottom_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_img_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/bottom_btn_cache.png
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_btn_install
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/mobclick_agent_state_com.fdhgkjhrtjkjbx.model.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_m_star
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_btnbg_green
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_adwords_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/btn_install.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_dtop_closebtn
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/m_star.png
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20171030+201710301746344+png.tmp
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_top_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_btnbg_orange
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/share.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_page_selecte_blue
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_bottom_btn_install
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20171025+201710251418924+png
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/d_cloesbtn_top
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_arrow_up
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_list_title_bg
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/p_mnbv.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_page_selecte_green
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_img_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_page_selecte_orange
/sys/class/net/lo/ifindex
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/item_btn.png
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20180129+201801291416686+png.tmp
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_adwords_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/adwords_bg.png
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/safe_icon.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_m_star
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_pop_bottom_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_cp_more_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_load/show
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20170615+201706151531634+png
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/dydCfgPref.xml
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20171025+201710251418924+png.tmp
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_sc_circle
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_page_selecte_orange
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/pcheck_p.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_cloesbtn_top
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_page_selecte_yellow
/data/data/com.fdhgkjhrtjkjbx.model/files/runing.properties
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_shortcutad_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/img_bg.png
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_btnbg_yellow
/data/data/com.fdhgkjhrtjkjbx.model/.md5
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_safe_icon
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/arrow_up.png
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_arrow_up
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_install_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_dtop_closebtn
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_page_selecte_yellow
/data/dalvik-cache/data@app@com.fdhgkjhrtjkjbx.model-1.apk@classes.dex
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_cp_other_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_btnbg_blue
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/dydTimePref.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_arrow_down
/proc/meminfo
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/safe_line.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_cp_other_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/bottom_btn_install.png
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_bottom_btn_cancel
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_appsc_an
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_page_selecte_blue
/proc/net/if_inet6
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/bottom_btn_cancel.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_cp_more_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_btnbg_blue
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/top_bg.png
/mnt/sdcard/ddad/runing.properties
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_pop_bottom_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_btnbg_orange
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_install_btn
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/sc_circle.png
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/pcheck_n.png
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_top_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/pop_back.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_sc_circle
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20170615+201706151531634+png.tmp
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_listview_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_page_selecte_green
/data/data/com.fdhgkjhrtjkjbx.model/app_oiuj/zkl.jar
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/tj_line.png
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/mobclick_agent_header_com.fdhgkjhrtjkjbx.model.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_listcloseBtn
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20171027+201710271603336+png.tmp
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/pop_bottom_btn.png
/data/data/com.fdhgkjhrtjkjbx.model/app_zxlk/bvfg.zip
/data/data/com.fdhgkjhrtjkjbx.model/.sec_version
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_page_normol
/sys/class/net/eth0/ifindex
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_safe_line
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_appsc_an
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_default_bg
/proc/cpuinfo
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_shortcutad_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_listcloseBtn
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_btnbg_yellow
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_cloesbtn_top
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/pushapp.png
/mnt/sdcard/ddad/log/com.fdhgkjhrtjkjbx.model.txt
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_pop_back
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_pop_back
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_tj_line
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_safe_icon
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_list_title_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_imgfile/d_listview_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/bottom_bg.png
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_btnbg_green
/mnt/sdcard/ddad/spot/http+apk+d+ad+yuanfenup+com+ad+20171030+201710301746344+png
/data/data/com.fdhgkjhrtjkjbx.model/shared_prefs/preferences.xml
/data/data/com.fdhgkjhrtjkjbx.model/app_psimg/d_shortcutad_bg
/data/data/com.fdhgkjhrtjkjbx.model/app_android.intent.action.PACKAGE_ADDED/d_page_normol

System Properties

Android Static Analysis

Screenshots

Network Analysis

Hosts Involved

IP Address
ff02::16
ff02::1:ff12:3456
ff02::2
ff02::1
106.11.249.213
106.11.250.205
121.199.6.248
129.250.35.250
183.129.194.243
211.144.132.59
211.144.132.60
47.52.196.21
60.29.245.168

DNS Requests

Domain	IP Address
apk.d.ad.yuanfenup.com	183.129.194.243
www.plapk.com	47.52.196.21
ty.plapk.com	47.52.196.21
api.is.139199.com	211.144.132.60
a.dianjoy.com	60.29.245.168
alog.umeng.com	106.11.249.213
w154151.s114.chinaccnet.cn	121.199.6.248
2.android.pool.ntp.org	162.210.111.4
api.push.guiji.com	211.144.132.59

HTTP Requests

URL	Data
http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png	GET /ad/20170627/20170627161667.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://api.is.139199.com/is/init.jsp	POST /is/init.jsp HTTP/1.1 Content-Length: 432 Content-Type: application/x-www-form-urlencoded Host: api.is.139199.com Connection: Keep-Alive
http://api.is.139199.com/is/info.jsp	POST /is/info.jsp HTTP/1.1 Content-Length: 511 Content-Type: application/x-www-form-urlencoded Host: api.is.139199.com Connection: Keep-Alive
http://a.dianjoy.com/dev/api/connect.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae	GET /dev/api/connect.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: a.dianjoy.com Connection: Keep-Alive Accept-Encoding: gzip
http://alog.umeng.com/app_logs	POST /app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate Content-Length: 533 Host: alog.umeng.com Connection: Keep-Alive
http://a.dianjoy.com/dev/api/connect.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae	GET /dev/api/connect.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: a.dianjoy.com Connection: Keep-Alive Accept-Encoding: gzip
http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png	GET /ad/20170615/201706151531634.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://a.dianjoy.com/dev/api/spend.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae&spend_point=100&t=4410872175071300&auth=34bedea639de72db9320688274a18299	GET /dev/api/spend.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae&spend_point=100&t=4410872175071300&auth=34bedea639de72db9320688274a18299 HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: a.dianjoy.com Connection: Keep-Alive Accept-Encoding: gzip
http://api.is.139199.com/is/list.jsp	POST /is/list.jsp HTTP/1.1 Content-Length: 508 Content-Type: application/x-www-form-urlencoded Host: api.is.139199.com Connection: Keep-Alive
http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae	GET /dev/api/user_account.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: a.dianjoy.com Connection: Keep-Alive Accept-Encoding: gzip
http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae	GET /dev/api/user_account.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: a.dianjoy.com Connection: Keep-Alive Accept-Encoding: gzip
http://apk.d.ad.yuanfenup.com/ad/20171206/201712061633321.png	GET /ad/20171206/201712061633321.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png	GET /ad/20171030/201710301746344.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://alog.umeng.com/app_logs	POST /app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate Content-Length: 630 Host: alog.umeng.com Connection: Keep-Alive
http://ty.plapk.com/sdk100.html	GET /sdk100.html HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: ty.plapk.com Connection: Keep-Alive Accept-Encoding: gzip
http://www.plapk.com/adv/tc.html	GET /adv/tc.html HTTP/1.1 User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.1.2; sdk Build/MASTER) Host: www.plapk.com Connection: Keep-Alive Accept-Encoding: gzip
http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png	GET /ad/20171025/201710251418924.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://api.push.guiji.com/push/info.jsp	POST /push/info.jsp HTTP/1.1 Content-Length: 897 Content-Type: application/x-www-form-urlencoded Host: api.push.guiji.com Connection: Keep-Alive
http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png	GET /ad/20180129/201801291416686.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://apk.d.ad.yuanfenup.com/ad/20171027/201710271603336.png	GET /ad/20171027/201710271603336.png HTTP/1.1 Host: apk.d.ad.yuanfenup.com Connection: Keep-Alive
http://alog.umeng.com/app_logs	POST /app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate Content-Length: 748 Host: alog.umeng.com Connection: Keep-Alive
http://api.is.139199.com/is/init.jsp	POST /is/init.jsp HTTP/1.1 Content-Length: 501 Content-Type: application/x-www-form-urlencoded Host: api.is.139199.com Connection: Keep-Alive
http://api.is.139199.com/is/show.jsp	POST /is/show.jsp HTTP/1.1 Content-Length: 608 Content-Type: application/x-www-form-urlencoded Host: api.is.139199.com Connection: Keep-Alive

Dynamic HTTP/HTTPS Requests

Request	Response
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
GET http://ty.plapk.com/sdk100.html HTTP/1.1	HTTP/1.1 200 OK
GET http://www.plapk.com/adv/tc.html HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/connect.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/spend.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae&spend_point=100&t=4410872175071300&auth=34bedea639de72db9320688274a18299 HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502283834530&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
GET http://ty.plapk.com/sdk100.html HTTP/1.1	HTTP/1.1 200 OK
GET http://www.plapk.com/adv/tc.html HTTP/1.1	HTTP/1.1 200 OK
GET http://ty.plapk.com/sdk100.html HTTP/1.1	HTTP/1.1 200 OK
GET http://www.plapk.com/adv/tc.html HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/connect.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170615/201706151531634.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171025/201710251418924.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171030/201710301746344.png HTTP/1.1	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20180129/201801291416686.png HTTP/1.1	HTTP/1.1 200 OK
GET http://a.dianjoy.com/dev/api/user_account.php?device_id=351451208401216&imsi=42502165139494&device_name=Nexus+5&os_type=android&os_version=4.1.2&country_code=US&language=en&app_package_name=com.fdhgkjhrtjkjbx.model&cid=&app_version=5.0&appvc=5&library_version=3.5.0.wf&screen_density=160&screen_layout_size=2&screen_width=320&screen_height=480&net=mobile%2Cepc.tmobile.com%2CLTE%2C13&verify_id=dce40468&app_id=4ae87cae7b159d89f3bc39ccf797beae HTTP/1.1	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
POST http://alog.umeng.com/app_logs HTTP/1.1 X-Umeng-Sdk: Android/4.6.3 %E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8%2F5.0+Nexus+5%2F4.1.2+4b4fbfb02e1bfb6c24ca3ee0f63ada54 Content-Encoding: deflate	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20170627/20170627161667.png HTTP/1.1	HTTP/1.1 404 Forbidden
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=p-goapk&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=p-goapk&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=p-goapk&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&adCount=4	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/init.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171027/201710271603336.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171027/201710271603336.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171027/201710271603336.png HTTP/1.1	HTTP/1.1 200 OK
GET http://apk.d.ad.yuanfenup.com/ad/20171206/201712061633321.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20171206/201712061633321.png HTTP/1.1	HTTP/1.1 404 Forbidden
GET http://apk.d.ad.yuanfenup.com/ad/20171206/201712061633321.png HTTP/1.1	HTTP/1.1 404 Forbidden
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=120&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=120&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=120&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/show.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&flag=1&ps=3N7BuBsLKCmM5yx9Szya0_MnJKlPt5ljPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JAz2YJ70JP3Nk	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/show.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&flag=1&ps=3N7BuBsLKCmM5yx9Szya0_MnJKlPt5ljPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JAz2YJ70JP3Nk	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/show.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&flag=1&ps=3N7BuBsLKCmM5yx9Szya0_MnJKlPt5ljPtmPxyyTVTC6GfCo7IyfA7_DOxeVTGLYDCLlGgeeeht9odhH11-JAz2YJ70JP3Nk	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/list.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&page=1	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/list.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&page=1	HTTP/1.1 200 OK
POST http://api.is.139199.com/is/list.jsp HTTP/1.1 appid=cfca2422e73ed6be1c99bcb80dc18356&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.4.1&sign=null&channelid=null&pushFlag=true&adType=1&restart=120&interval=120&delay=24000&page=1	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=240&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=240&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=240&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=240&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=240&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK
POST http://api.push.guiji.com/push/info.jsp HTTP/1.1 appid=e8a6b3483f4cf1f896796d5657e94068&apptype=1&appVersion=5.0&appVersionInt=5&appname=%E4%B8%87%E8%83%BD%E7%94%B5%E5%BD%B1%E6%92%AD%E6%94%BE%E5%99%A8&sysApp=0&country=US&lang=en&udid=351451208401216&imsi=42502165139494&carrier=Cellcom&manufacturer=unknown&model=Nexus+5&net=epc.tmobile.com&networkOperator=Cellcom&osVersion=4.1.2&osVersionInt=16&packagename=com.fdhgkjhrtjkjbx.model&screen=320x480&sdkVersion=1.5.8&sign=null&channelid=dapp&cn=1&pushFlag=true&adType=2&restart=120&interval=240&delay=1000&installs=com.amossys.hooker.generatecontacts%2Ccom.android.gesture.builder%2Ccom.android.smoketest%2Ccom.android.smoketest.tests%2Ccom.android.widgetpreview%2Ccom.cuckoodroid.droidmon%2Ccom.emulator.antidetect%2Ccom.example.android.apis%2Ccom.example.android.livecubes%2Ccom.example.android.softkeyboard%2Ccom.fdhgkjhrtjkjbx.model%2Ccom.noshufou.android.su%2Cde.robv.android.xposed.installer	HTTP/1.1 200 OK

Volatility

Nothing to display.

getprop ro.product.cpu.abi
chmod 755 /data/data/com.fdhgkjhrtjkjbx.model/.cache/com.fdhgkjhrtjkjbx.model
chmod 755 /data/data/com.fdhgkjhrtjkjbx.model/.cache/com.fdhgkjhrtjkjbx.model.art

Library Name:secexe ,Library Path:/data/data/com.fdhgkjhrtjkjbx.model/lib/libsecexe.so
DexFile:/data/data/com.fdhgkjhrtjkjbx.model/.cache/classes.jar
DexFile:/data/data/com.fdhgkjhrtjkjbx.model/.cache/classes.jar
DexFile:/data/data/com.fdhgkjhrtjkjbx.model/app_zxlk/bvfg.zip
DexFile:/data/data/com.fdhgkjhrtjkjbx.model/app_oiuj/zkl.jar
loadDex:/data/data/com.fdhgkjhrtjkjbx.model/.cache/classes.jar
loadDex:/data/data/com.fdhgkjhrtjkjbx.model/app_zxlk/bvfg.zip
loadDex:/data/data/com.fdhgkjhrtjkjbx.model/app_oiuj/zkl.jar

finish
android.security.STORAGE_CHANGED
android.intent.action.PACKAGE_ADDED
android.intent.action.PROXY_CHANGE
android.intent.action.SCREEN_OFF
onRestart
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_REMOVED

com.zlkm.dis.PManager->load
com.zlkm.dis.PManager->getInstance
cn.ps.ph.nm.PsManager->recMes
com.zlkm.dis.PManager->setReceiver
com.zlkm.dis.PManager->setLocalService
com.zlkm.dis.PManager->setLocalActivity
cn.ps.ph.nm.PsManager->setLR
cn.ps.ph.nm.PsManager->setLS
cn.ps.ph.nm.MyReceiver->onReceive
->getUidRxBytes
->values
dalvik.system.DexClassLoader->loadClass
com.zlkm.dis.PManager->show
com.zlkm.dis.MService->onCreate
com.zlkm.dis.MService->setActivity
dalvik.system.DexClassLoader->clearAssertionStatus
cn.ps.ph.nm.PsManager->getInstance
cn.ps.ph.nm.PsManager->setLA
->getUidTxBytes

File Details

Android Application Info

Signatures

Android Dynamic Analysis

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.MainActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.MainActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Intent Class: com.fdhgkjhrtjkjbx.model/com.fdhgkjhrtjkjbx.model.BgActivity

Android Static Analysis

Screenshots

Network Analysis

Volatility